Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/6hfF9hXKjgrKFooeaug0dqoqpy4.roa
File:                     6hfF9hXKjgrKFooeaug0dqoqpy4.roa (raw, json)
Hash identifier:          HbPzi19lysQJbktqMkecZ7bL+5UPUAX3l4hMIVe/q+U=
Subject key identifier:   EA:17:C5:F6:15:CA:8E:0A:CA:16:8A:1E:6A:E8:34:76:AA:2A:A7:2E
Certificate issuer:       /CN=133897fc7a963f14215d58e1824144ab19fd5810
Certificate serial:       17CB6302
Authority key identifier: 13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/6hfF9hXKjgrKFooeaug0dqoqpy4.roa
Signing time:             Sat 01 Jan 2022 00:54:26 +0000
ROA not before:           Sat 01 Jan 2022 00:54:26 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     5528
IP address blocks:        80.233.248.0/24 maxlen: 24
                          80.233.165.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 399205122 (0x17cb6302)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=133897fc7a963f14215d58e1824144ab19fd5810
        Validity
            Not Before: Jan  1 00:54:26 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ea17c5f615ca8e0aca168a1e6ae83476aa2aa72e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:23:d3:0e:d4:88:f4:3e:27:15:3c:03:61:52:
                    71:ef:7f:14:a4:0a:c8:4a:ef:83:27:7f:98:40:c8:
                    9c:34:55:3b:a6:c3:17:b2:c2:d3:67:cf:d7:76:76:
                    00:7e:44:6c:13:3e:9d:9e:f2:67:3e:4e:bb:ec:8a:
                    56:40:83:41:77:91:11:7f:a0:d6:f5:1a:fb:cc:e5:
                    51:d7:42:f4:a2:55:18:90:92:8e:a2:8d:e3:7b:f7:
                    75:e3:d2:21:6b:a1:f1:80:92:39:7f:f0:79:4d:78:
                    ac:6a:22:3e:67:2f:a5:d5:dc:b5:f0:95:90:1f:9f:
                    c0:4d:ee:c8:5f:b6:94:cb:23:5a:44:08:22:fb:71:
                    37:5c:3b:2e:da:8e:82:41:3e:bb:65:83:38:33:5a:
                    b8:8d:c7:42:d4:c4:57:53:3b:8f:cc:19:6b:94:bd:
                    ae:a0:a0:78:02:dd:b6:90:f8:8e:82:ac:4b:8c:6f:
                    fe:fd:ad:ca:15:ba:d6:37:35:2d:b7:1f:1f:df:83:
                    41:54:aa:ea:a1:aa:fe:0f:eb:76:6d:08:22:89:44:
                    12:8d:3f:ea:2a:4b:e3:8f:bf:e0:d4:de:95:36:02:
                    b0:55:43:4d:f5:aa:5c:33:60:90:2e:35:35:e9:5a:
                    37:46:b9:0e:09:ad:f8:1d:1a:75:13:ae:03:92:4a:
                    b0:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:17:C5:F6:15:CA:8E:0A:CA:16:8A:1E:6A:E8:34:76:AA:2A:A7:2E
            X509v3 Authority Key Identifier:
                keyid:13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/6hfF9hXKjgrKFooeaug0dqoqpy4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/EziX_HqWPxQhXVjhgkFEqxn9WBA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.233.165.0/24
                  80.233.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:5d:4f:e0:42:5e:47:6e:fd:1d:61:1e:de:00:19:ae:be:eb:
         a2:2d:38:33:f3:1e:05:e4:cf:a1:dc:dc:99:a0:9b:67:eb:f6:
         53:ac:48:4b:35:2d:19:86:fa:9b:96:6b:1d:11:b8:99:62:03:
         be:8b:6b:8d:f6:0e:c8:60:34:b8:e7:f1:f6:29:1c:fe:37:49:
         b3:19:7b:cc:3d:21:09:2d:61:05:fd:c2:e7:84:d1:a9:35:f4:
         55:44:a1:3f:4b:95:c6:44:7f:ae:13:0d:aa:0a:91:d0:50:15:
         52:27:07:7e:a4:69:6f:cd:67:11:3d:fd:84:83:c4:20:2e:d0:
         35:b6:17:6a:af:b6:4d:ff:8e:23:0f:f9:bb:46:1d:0d:77:f7:
         01:69:c5:b3:47:14:52:8c:91:7d:68:98:24:c1:40:4f:af:4c:
         86:5a:43:68:9c:77:48:d5:f3:bb:7a:13:2e:63:32:8c:e6:85:
         39:de:84:92:53:19:5c:00:e7:da:56:13:b2:4a:a9:64:07:7e:
         d7:ff:3a:d8:3a:ae:92:1c:a4:fb:14:5c:e6:72:55:ca:4c:10:
         2d:f3:06:27:da:43:64:69:d4:05:95:e7:d9:f6:e6:30:38:72:
         97:58:b2:fc:b8:64:ef:82:1d:cc:05:f8:2a:46:8e:90:e6:05:
         c0:cf:e3:1e
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEF8tjAjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
MzM4OTdmYzdhOTYzZjE0MjE1ZDU4ZTE4MjQxNDRhYjE5ZmQ1ODEwMB4XDTIyMDEw
MTAwNTQyNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZWExN2M1ZjYxNWNh
OGUwYWNhMTY4YTFlNmFlODM0NzZhYTJhYTcyZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL4j0w7UiPQ+JxU8A2FSce9/FKQKyErvgyd/mEDInDRVO6bD
F7LC02fP13Z2AH5EbBM+nZ7yZz5Ou+yKVkCDQXeREX+g1vUa+8zlUddC9KJVGJCS
jqKN43v3dePSIWuh8YCSOX/weU14rGoiPmcvpdXctfCVkB+fwE3uyF+2lMsjWkQI
IvtxN1w7LtqOgkE+u2WDODNauI3HQtTEV1M7j8wZa5S9rqCgeALdtpD4joKsS4xv
/v2tyhW61jc1LbcfH9+DQVSq6qGq/g/rdm0IIolEEo0/6ipL44+/4NTelTYCsFVD
TfWqXDNgkC41NelaN0a5Dgmt+B0adROuA5JKsCkCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBTqF8X2FcqOCsoWih5q6DR2qiqnLjAfBgNVHSMEGDAWgBQTOJf8epY/FCFd
WOGCQUSrGf1YEDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0V6aVhfSHFXUHhRaFhWamhna0ZFcXhuOVdCQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWMvOGJlNGFmLTYyYmUtNDE4MC1iZWM5LWYyYjg3ZjM4YjlkZC8x
LzZoZkY5aFhLamdyS0Zvb2VhdWcwZHFvcXB5NC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWMv
OGJlNGFmLTYyYmUtNDE4MC1iZWM5LWYyYjg3ZjM4YjlkZC8xL0V6aVhfSHFXUHhR
aFhWamhna0ZFcXhuOVdCQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAFDppQMEAFDp+DANBgkqhkiG9w0B
AQsFAAOCAQEAgl1P4EJeR279HWEe3gAZrr7roi04M/MeBeTPodzcmaCbZ+v2U6xI
SzUtGYb6m5ZrHRG4mWIDvotrjfYOyGA0uOfx9ikc/jdJsxl7zD0hCS1hBf3C54TR
qTX0VUShP0uVxkR/rhMNqgqR0FAVUicHfqRpb81nET39hIPEIC7QNbYXaq+2Tf+O
Iw/5u0YdDXf3AWnFs0cUUoyRfWiYJMFAT69MhlpDaJx3SNXzu3oTLmMyjOaFOd6E
klMZXADn2lYTskqpZAd+1/862Dqukhyk+xRc5nJVykwQLfMGJ9pDZGnUBZXn2fbm
MDhyl1iy/Lhk74IdzAX4KkaOkOYFwM/jHg==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:06 2023 by rpki-client on console-fra.rpki-client.org